IR 05000483/1997018

Insp Rept 50-483/97-18 on 971027-31.No Violations Noted. Major Areas Inspected:Access Authorization,Alarm Stations, Communications,Access Control of Personnel,Packages & Vehicles,Assessment Aids & Security Plans

ML20199A515
Person / Time
Site:	Callaway
Issue date:	11/12/1997
From:	NRC OFFICE OF INSPECTION & ENFORCEMENT (IE REGION IV)
To:
Shared Package
ML20199A512	List: IR 05000483/1997018 ML20199A508
References
50-483-97-18, NUDOCS 9711170207
Download: ML20199A515 (13)

Text

... . - _ _ _ . _ _ - . . _ . . . _ _ _ _ . __ _ _ _ . . . _ _ . _ _ _ _

p ,

l

!

t

.

-ENCLQiUBE U.S. NUCLEAR REGULATORY COMMISSION i REGION IV  !

i Docket No.: 50 483

!

License Wo.: NPF 30 l l

' Report No.: 50 483/97 18 l Licensee: Union dectric Company Facility: Callaway Plant Location: Junction Hwy, CC and Hwy. O Fulton, Missouri Dates: October 27 31,1997 Inspector: - D. W. Schaefer, Security Specialist Plant Support Branch Approved By: Blaine Murray, Chief, Pfare. Support Branch Division of Reactor Safety ATTACHMENT: Supplemental Information

.

b .

l<

.

2-EXfnUTIVE SUMMARY Callaway Plant NRC Inspection Report 50 483/97 18 This was an announced inspection of the licensee's physical security program. The areas inspected included access authorization; alarm stations; communications; access control of personnel, packages, and vehicles; assessment aids; security program plans and '

procedures; security event logs; management support; security program audits; and review of previous inspection finding PlanLSFRDDL1

• Background investigation screening files were complete and thorough. An excellent program had been established for denying, revoking, and appealing unescorted access authorization. The access authorization program was a security program strength (Section S1.1).

• The alarm stations were redundant and well protected. Alarm station operators were alert and well trained. A new security computer system scheduled to be installed in 1999 will provide additional enhancements to the overall security program (Section S1.2).

• Very good radio and telephone communication systems were maintained. An adequato number of portable radios was available for members of the security organization. The rnanual transfer of emergency power from the diesel generators to the radio repeater for the on site radio system had not been addressed in an -

implementing proceduto (Section S1.3).

• A very good program for searching personnel packages and vehicles w6s maintained (Section S1.4).

- Assessment aids provided effective and complete assessment of the perimeter detection zones. A closed-circuit television camera that provided a weak image was replaced (Section S2.1).

• Changes to security programs and plans were reported within the required time frame. Overall, implementing procedures met the performance requirements in the physical security plan (Section S3.1).

• A good security event reporting program was in place. The security staff was correctly reporting security events. The security incident reports were accurate and neat (Section S3.2).

• Senior management support for the security organization was good. The security program was implemented by a trained and qualified staff (Section S6.1).

.

l

.-.

fI

.

.

I

• Security program audits and surveillances were thorough and of excellent quality (Section S7.1).

I l

\

i

!

4- r s

RenntLDr. tails i

!

IV Plant Smppen l I

S1 Conduct of Security and Safeguards Activities j S Access Authorization j i Inspecti_on Snone (8170jh02.01)  :

The Access Authorization Program was inspected to determino compliance with the requirements of the security plan and Regulatory Guide 5.06. The areas inspected included the review of background investigation files for individuals presently

_

granted unescorted access and for individuals that have been denied unescorted access, _ Observations and Findinos  ;

The inspector reviewed records and conducted interviews to determine the adequacy of the program. The inspector also reviewed information concerning the ,

licensee's verification of identity, employment history, educational history, credit history, criminal history, military service, and the character and reputation of the ,

applicants before granting individuals unescorted access to protected and vital area The inspector reviewed fif teen background investigation files. All files were complete. Eight of the files resulted in denial of access. The files were complete and thorough. The licensee's program for denying or revoking unescorted access authorization was excellent. The inspector reviewed tb<> rationale used by the licensee in its decision for denial. The persons denied access were notified of the denial of access and of their right to review and reply to anything in the records used as a reason for the access denial. These persons were also provided with information on the appeal process that was availabb to the The licensee had recently streamlined and improved its in processing progum for ,

individuals seeking unescorted site access. The new computer based in processing program focused upon an early completion of all background investigations and insured completion of all required Fitress fo,-Duty testing and site access training prior to granting unescorted access authorization to the plan The licensee's manner of meeting all access euthorization requirements of the security plan and Regulatory Guide 5.66 was a program strength, Conclusions

,

Background investigation screening files were complete and thorough. An excellent program had been established for denying, revoking, and appealing unescorted- ! .i l

.- - - . . .- _ . - - - - - -- .. - - .

5-access authorization. The access authorization program was a security program strengt S 1.2 Alarm stations _ in_soection Stone (81700 02.01)

The alarm stations were inspected to determine compliance with the requirements of the security plan. The areas inspected included the requirements and capabilities of the alarm stations, redundancy and diversity of stations, protection of the alarm stations, and systems security, Obiettelions and Findinos The inspector verified the redundancy and diversity of the alarm stations. Action by one alarm station operator could not reduce the effectiveness of the security systems without the knowledge of the other alarm station operators. The central alarm station and secondary alarm station were bullet resistant. The inspector questioned the station operators and determined that they were properly trained and knowledgeable of their dutie The licensee has approved the installat.bn of a new security computer system. This new system to be installed in mid 1939 will enhance the overall security program, CDndusions The alarm stations were redundant and well protected. Alarm station operators were alert and well trained. A new security computer system scheduled to be installed in 1999 will provide additional enhancements to the overall security

'

progra S 1.3 Communications inspection Scone 181700-02.01)

The communication capabilities were inspected to determine compliance with the requirements of the security plan. The areas inspected included the operability of radio and telephone systems and the capability to effective'.y communicate with the locallaw enforcement agencies through both of the systems, Observations and Findinos The inspector verified that the licensee had very good radio and telephone systems capable of meeting all communication requirements of the security organizatio The licensee maintained an adequate number of portable radios for use by members of the security organization. The licensee also had a maintenance program to insure that the batteries for the portable radios remained at maximum operating power.

l

.

,

.

0-Section 7 of the licensee's security plan requires, in part, that the repeater for the on-site radio system be powered by a bat %ry sy:: tem that is maintained fully charged by separate battery chargers. The security plan also required that upon loss of off-site power, that a vital power source be manually restored to the charger from the diesel generators. However, the inspector determined through interviews that the action to manually restore (emergency) power to the station radio repeater had not been identified in a licer.see procedure. The licensee stated that Emergency Operating Procedures ECA 0.1 or ECA 0.2, ' loss of all AC Power Recovery With/Without Safety inject'on Required," would be revised to ensure the manual transfer of emergency power from the diesel generators to the repeater for the on-site radio system. The inspector will review the revised procedure during a future inspection (IFl 483/9718-01). Conclusions Very good radio and telephone communication systems were maintained. An adequato number of portable radios was available for members of the security organization. The manual transfer of emwgency power from the diesel generators to the radio repeater for the on site radio system had not been addressed in an implementing procedur S 1.4 Protected Area Access Control of Personnel, Packages, and Vehicles IDSDection Scope (81700-02.011 The access control program for personnel packages and vehicles was inspected to determine compliance with the requirements of the security plan, Dhservations and FindinOS The inspector determined through observations at the main access facility and at the vehicle sallyport that the licenseo properly controlled personnel, package, and vehicle access to the protected area. The protected area access control equipment was inspected and found to be functional and well maintained. The inspector also observed use of the X ray machine and search of packages and material at the main access facility and at the warehouse (Stores) search area. The operators were efficient and well trained, Conclusions A very good program for searching personnel packages and vehicles was maintaine .

.-

- _

,-

.

i

-7 S2 Status of Security Facilities and Equipment ,

S2.1 Assessment Aids insection Scoce (81700 02.02)

> The inspector reviewed the assessment aids to determine compliance with the physical security plan. The areas inspected included the closed circuit television monitors located in the alarm station Observations and Findings The inspector observed the assessment aids during the hours of daylight and darkness from October 28 29, 1997, and determined that the licensee overall assessment aids system was good. The inspector verified through observation that the fixed closed circuit television cameras were positioned to ensure proper coverage of the perimeter security alarm zones. With one exception, the c6mera resolution was good. The inspector determined through interviews that licensee technicians provided excellent service suppor On October 28,1997, during the hours of darkness, the inspector observed that a closed-circuit television camera provided a relatively weak image of an officer in a perimeter alarm zone. As a precautionary measure, the licensee implemented appropriate compensatory measures. On October 29,1997, af ter replacament on this camera, the inspector determined that an individual could be adequately viewed via the cloted circuit television camera, Conclusions Assessment aids provided effective and complete assessment of the perimeter detection zones. A closed-circuit television camera that provided a weak image was replace S3 Security and Safeguards Procedures and Documentation S3.1 Security Program Plans and Procedures insoection Scone (81700 02.031 The physical security plan and the implementing procedures were inspected to determine compliance with the requirements of.10 CFR 50.54(p) and the physical security pla Observations and Findinas The inspector determined that previous plan changes were submitted within the required time frame and changes submitted did not reduce the effectiveness of the

,

!

l l

_ _ .- . - -

.__. ____ - _- _- _- - _ _ _ _ - _ ._ _ _ _ . . <

.

!

. l

.g.

l plan. Except for the ;ssue discussed in Section S1.3 above, the inspector did not find any problems with implementing procedures. The insp3ctor reviewed six implementing procedures for adequacy, ensured that the licensee maintained an i effective management system for the development and administration of procedures, and that changes to the procedures did not reduce the effectiveness of the licensefs security progra > CandusiQas Changes to security programs and plans were reported within the required time frame. Overall, implementing procedures met the performance requirements in the physical security pla ,

S3.2 Security Event Logs lusocction ScongE1200-02.02)

The inspector reviewed safeguards event lo0S 6nd security incident reports to determine compliance with the requirements of 10 CFR 73.21(b) and (c),

10 CFR 26.73, and the physical s0 writy plan, Observations and Findinos The inspector reviewed the Suggestion Occurrence Solution System Log (security event logs) from January 1 through September 30,1997. The records were available for review and maintained for the time required by regulations. The inspector determined that the licensee conformed to the regulatory requirements regarding the reporting of security events. The inspector also reviewed four Suggestion Occurrence Solution Reports (security incident reports). The logs and supporting reports were accurate, neat, and contained sufficient detail for the reviewer to determine root cause, reportability, and corrective action taken. The licensee's records included trending and analysis of event CDadusions A good secunty event reporting program was in place. The security staff 9 's correctly reposting security events. The security incident reports were accurate and nea S6 Security Organization and Administration S Management Support

" IDanection Scoce (81700-Q2.0S1 The effectiveness and adequacy of management support were inspected to determine the degree of management support for the physical security progra ..

{ . .

I

,

l

!

-

.

. f Qhservations and Findinas l

!

The inspector determined by discussions with security force personnel that the l security program received good support from senior management. The inspector i determined that the secu'ity program was implemented by a trained and qualified secunty staff. All members of the security organization had a clear understanding of j their duties ard responsibilitie t I Conclusions  ;

Senior management support for the security organization was good. The security i program was implemented by a trained and qualified staf I S 7 .- Quality Assurance in Security and Safeguards Activities S7.1 Security Program Audits

,

- Insoection Scone (81700-02.07)

The audits of the security program were inspected to uetermine compliance with the f requirements of 10 CFR 50.54(p) and the physical security pla ! Observations and Findinos The inspector verified that security program audits had been conducted at least every 12 months as required. The inspector reviewed two Quality Assm ice Audits and seven Surveillance Reports listed in the attachment. The inspector interviewed audit personnel and confirmed that they were independent of plant security '

management and plant security management supervision. The inspector determined that the audits and surveillance reports were thorough and of excellent qualit The inspector reviewed the Quality Assurance Planning Guide for the Functional Area of Security, dated November 14,1996. This Guide lists the audit frequency for each subfunctional area of the overall security program. During the exit meeting ,

on November 31/1997, the inspector stated that even though all subfunctional areas had been audited annually, several subfunctional areas of the Guide listed an audit frequency of 24 and 30 months. Section 14 of the security plan requires,in i part, completion of an annual review and evaluation of the effectiveness of the physical protection system. The licensee stated that audit frequencies in the Guide l would be reviewe Conclusions ,

Security program audits and surveillances were thorough and of excellent qualit i

>

h r

3~.- 9mq-r- - - - g ip .< rec--+

. en-- 9ye v- w p m-mve m g-+wm.-,-n .3 , u u .e.W yw .en-w-w---+--. -m--w--=wwe.en-.m--mv. e---r- eew-w+- ~ - ~ - -

.

.

.

-10 S8 Followup Plant Support (92904)

S8.1 JClosed) Insonction Followuo item 483/9515-02: Access Authorizatjon Proaram Procedure During a previous security inspection, it was noted that the licensee's Access Authorization Program Procedure APA ZZ-01104, Revision 10, dated May 4,1994, did not include reporting requirements for access authorization event During this inspection, the inspector reviewed Section 14 of Proceduro APA ZZ-01104, Revision 12, " Reportable /Logable Event." This item is close S8.2 IQoen) Insocction Followuo item 483/9516.02: Periodic Load Testina of Security Dhac.L0s31etalol During a previous security inspection, the inspector determined that since its installation in 1984, the licensee's security diesel generator had been performance tested each month via conducting only a generator "run" test. However, unlike the periodic load testing of the diesel gcnerators supporting the plant, the emergency operating f acility and the Technical Support Center, the security diesel generator had never been load tested. As such, the security diesel generator had not demonstrated with high assurance its capability of providing required backup power to the required security equiprnent. Instead, the periodic "run" tests had only evaluated the generator's ability to start and operate without a loa During this inspection, the licensee stated that load testing was feasible and that the procedure for load testing the security diesel generator was beine Qveloped. The licensco anticipated that the procedure would be cornpleted in time G conduct the initialload test in Spring 199 V. . Mariagement Meetings XI Exit Meeting Summary The inspector presented the inspection results to members of licenseo management at the conclusion of the inspection on November 31,1997. The licensee acknowledged the findings presente _

.

AITACHMENI SUPPLEMENTAL INFORMATION PARTIAL LIST OF PERSONS CONTACTED LicenSte R. Randolph, Vice President, Nuclear Operations

'

J. Blosser, Manager, Operations Support G. Chambly, Supervisor, Access Control J. Coash Training Supervisor, Security  ;

P. Davis, Nurse, Fitness for Duty M. Dunbar, Supervisor, Security Operations M. Faulkr'er. Acsistent Saperintendent. Security D. Fitzgerald, Suoerintendent, Security G. Hamilton, Supervising Engineer, Quality Assurance Operatiens Suppntt J. Laux, Manager, Quality Assurance J. Lehman, Security Shif t Supervisor, Burns Security A. Lord, Engineer, Nuclear Engineering System T. Lowry, Engineer, Nuclear Engineering (Security) System S. McLaughlin, Acting Administration Supervisnr R. Mertz, Supervisor, Access Control M. Reidmeyer, Engineer, Quality Assurance R. Rist, Superintendent, Personnel G. Scheperlo, Auditor, Quality Assurance NflC F. Brush, Resident inspector Contrstols G. Hill, District Manager, Burns Security INSPcCTION PROCEDURES USED IP 81700 Physical Security Program for Power Reactors IP 92904 Followup - Plant Support

.

--

- -

. -_

- - . - - - . . - . - - . . . . - - .

l.. '

l

!

,4 _

.

>

2  ;

LIST OF ITEMS OPENED CLOSED AND DISCUSSED  :

i items Ooened 50-483/9518-01- IFl Revise Procedure Regarding Emergency Power to Station Radio Repeate [

i

,

. hems Closed 50 483/9515-02 IFl Access Authorization Program Procedure f

't hems Discussed l 50 483/051402 IFl Periodic Load Testing of the Security Diesel Generator i t

.

LIST OF DOCUMENTS REVIEWED j Suggestion Occurrence So'ution System Log (security event log) from January 1 through .

September 30,1997, and 4 incident reports [

19P'.' Security Performanco Indicators, dated October 9,1997 Quality Assuranco Department Semlannual Trend Analyt:s Reports (Industrial Security '

Supplement), dated October 7,1996, and September 16,1997

+

Back0round investigation records for 7 individuals granted and for 8 additionalindividuals denied unescorted access authorization ,

I Quality Assurance Pla ining Guide for the Functional Area of Security, dated November 14, 1996 Audit / Surveillance Reoorts Quality A:,surar'ce Audit of Access Authorization, Fitness for Duty and Security, dated l August 26,1996 ,

Quality Assurance Audit of Fitness-for-Duty and Access Authorization, dated August 28, 1997 .

t

,

Surv' ell' lance Report: Implementation of Corrective Actions to Prevent Pecurrence, dated - -

Octob'er 24,1997

-

Surveillance R_eport: Security Department Organization and Administration, dated

^ January 30,'1997

,

e t

- _- , .,u . . .__.__,:._.____.- - . . . . . . . , . . . . - _ . _ _ . _ _ . _ . . _ . . . . . - . . _ _ . . . ,

f

3-Surveillance Report: Security Equipment Testing, Maintenance, and Operation, dated April 24,1997 Surveillance Report: Security Outage Activities, dated November 12,1996 Surveillanco Report: Security Department Access Point Contro's, dated May 21,1997 Surveillance Report: Control of Safeguards Informatio1, dated July 31,1997 Surveillance Report: Local Law Enforcement Agency Interface, dated October 8,1997 SuggesliRILQscurrence Solution.LSDS) System Reoorts SOS 96-0844: Fitness for-Duty Policy SOS 96 0864: Procedural Approval SOS 96 0900: Badgeissuance SOS 96 0901: Root Cause Not Documented SOS 96 0902: Corrective Action for Previous SOS Report SOS 96 0997: Recommendations for Fitness for-Duty Program SOS 97-0030: Security Plan Reviews SOS 97-0077: Malfunctioning Door Lock SOS 97-0105: Filing of Safeguards Event Log SOS 97-0106: Review of Logable Events SOS 97-0315: Procedure Revision for X-ray Machines SOS 97-0434: Security Diesel Generator

• SOS 97 0476: Loci: smiths Performance of Duties SOS 97-0578: Handling of Security Keys SOS 97-0518: Protection of Safeguards Information SOS 97-0822: Computer for Processing Safeguards Information imnicme.Dtina Piorndules APA-AA-01104, Access Authorization Program Callaway Plant, Revision 12 SDP SF-00001, Security Patrols, Revision 1 SDP SF-00002, Operational Tests of Security Equipment, Revision 3 SDP-S600003, Communications, Revision 1 SDP SF-00022, Reporting of Safeguards Events, Revision 5 SDP ZZ-00010, Radio Use, Revision 0

,

\